Broker agrees $45mn settlement as part of data breach while Blackstone and KKR also among those penalised by US regulator